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AMENDMENTS TO THE CLAIMS 

In the Claims: 
1-11. (Canceled) 

12. (New) A method for sending a data packet from a first member of a virtual 
private network to a second member of the virtual private network comprising the 
steps of: 

receiving a data packet enroute to the second member; 
determining if the data packet is being sent between members of the 
virtual private network, and if so: 

determining the packet manipulation rules for packets sent between 
members of the virtual private network; 

forming a secure data packet by executing the packet manipulation 
rules on the data packet; and 

forwarding the secure data packet to the second member of the 
virtual private network; 

wherein said step of detemiining the packet manipulation rules 
includes the step of accessing a lookup table that maintains infonnation 
identifying compression and encryption algorithms to be utilized for data 
packets sent between members of the virtual private network; and 

wherein said step of forming a secure data packet includes the 
steps of encrypting at least a payload portion of the data packet according 
to the identified encryption algorithm; and compressing at least the 
payload portion of the data packet according to the compression algorithm 
identified. 

13. (New) The method according to claim 12, wherein said compressing step 
occurs prior to said encrypting step. 
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14. (New) The method according to claim 12, wherein if it is determined that 
the data packet is not being sent between members of the virtual private network, 
the data packet is not encrypted. 

15. (New) The method according to claim 14, wherein if it is determined that 
the data packet is not being sent between members of the virtual private network, 
the data packet is not compressed. 

16. (New) The method according to claim 12, wherein if it is determined that 
the data packet is not being sent between members of the virtual private network, 
the data packet is not compressed. 

17. (New) The method according to claim 12, wherein said receiving step 
occurs within a virtual private network unit, 

18. (New) The method according to claim 17, wherein the virtual private 
network unit is implemented in software running on a computer and the lookup 
table in located in a memory of the computer. 

19. (New) The method according to claim 17, wherein the virtual private 
network unit is implemented in a hardware device placed between a gateway 
device and the Internet. 

20. (New) The method according to claim 17, wherein the virtual private 
network unrt is implemented in a hardware device placed between a gateway 
device and a local area network including the first member of the virtual private 
network. 
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21 . (New) The method according to claim 1 2. wherein said step of detemiining 
that the data packet is being sent between members of the virtual private network 
includes comparing at least a destination address of the data packet to a list of 
stored destination addresses. 

22. (New) The method according to claim 12, wherein the lookup table 
maintains a plurality of different encryption algorithms, each encryption algorithm 
being associated with a different virtual private networi^, and wherein different 
virtual private networi^s include one or more common members. 

23. (New) The method according to claim 12, wherein the lookup table also 
maintains information identifying an authentication algorithm to be utilized for 
data packets sent between members of the virtual private network; and 

wherein if it is detenmined that the data packet is being sent between 
members of the virtual private network, authentication infomration is associated 
with the data packet acconiing to the identified authentication algorithm. 

24. (New) A virtual private networit unit for sending a data packet from a first 
member of a virtual private networi< to a second member of the virtual private 
networi< comprising: 

an Input for receiving a data packet enroute to the second member; 
circuitry and software for determining if the data packet is being sent 
between members of the virtual private networi<, and if so for 

detemiining the packet manipulation rules for packets sent 
between members of the virtual private network; and 

forming a secure data packet by executing the packet 
manipulation mies on the data packet; and 
an output for fonwarding the secure data packet to the second member of 
the virtual private networi<, wherein the packet manipulation rules are stored in a 
lookup table connected to said circuitry and software, and said lookup table 
maintains infomiatlon identifying compression and encryption algorithms to be 
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utilized for data packets sent between members of the virtual private network, 
and said circuitry and software fonns a secure data packet by encrypting at least 
a payload portion of the data packet according to the identified encryption 
algorithm and by compressing at least the payload portion of the data packet 
according to the compression algorithm identified. 

25. (New) The virtual private network unit according to claim 24, wherein said 
circuitry and software compresses the data packet prior to encrypting the data 
packet. 

26. (New) The virtual private networit unit according to claim 24, wherein if 
said circuitry and software detennines that the data packet is not being sent 
between members of the virtual private networic, said circuitry and software does 
not encrypt the data packet. 

27. (New) The virtual private networt^ unit according to claim 26, wherein if 
said circuitry and software detennines that the data packet is not being sent 
between members of the virtual private networic, said circuitry and software does 
not compress the data packet. 

28. (New) The virtual private networit unit according to claim 24. wherein if 
said circuitry and software determines that the data packet is not being sent 
between members of the virtual private networic, said circuitry and software does 
not compress the data packet. 

29. (New) The virtual private networic unit according to claim 24. wherein said 
circuitry and software are part of a computer and said lookup table in located in a 
memory of said computer. 
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30. (New) The virtual private network unit according to claim 24. wherein said 
circuitry and software are implemented in a standalone hardware device placed 
Ijetween a gateway device and the Internet. 

31. (New) The virtual private network unit according to claim 24, wherein the 
circuitry and software are implemented in a standalone hardware device placed 
between a gateway device and a local area network including the first member of 
the virtual private network. 



